$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa File: 586be0ff-556c-37d7-86fe-1cbb64864745.roa (raw, json) Hash identifier: IwRX1CIjIVO2l7fXa6ps4+YX7AqLGOCRCJ3z4XG9g4o= Subject key identifier: E7:92:85:A8:F5:E6:7B:DC:E9:33:F8:5B:9C:EB:3A:6F:76:7F:3B:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F53BF2B49ED8C08FBF68 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396566 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:3b:f2:b4:9e:d8:c0:8f:bf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9de243cc-3b83-4818-a1fa-a45e0ed2091c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:2d:92:bd:a9:d1:e9:d9:af:8c:e6:c6:83: 97:02:56:99:a7:f2:c8:8e:b7:d7:82:b1:91:fb:15: 70:58:62:99:84:7d:ac:45:cd:20:39:bd:25:da:d5: 94:2f:f5:6b:71:93:36:8b:fd:bb:e1:d9:89:ca:f5: 6d:2b:eb:c7:76:58:b3:12:fa:d4:90:7f:a8:fe:ed: ee:3f:e8:66:d8:0e:58:f3:0d:14:bf:2c:a7:3d:84: aa:e0:cf:3b:ff:19:94:44:fa:6a:b2:10:40:4c:ef: ee:d1:f9:3c:1a:50:ba:dc:c0:91:2a:b6:80:75:ed: 3d:ee:a5:37:c5:aa:f1:99:ae:89:c9:7e:02:88:0c: 18:43:9f:04:02:ed:b9:d5:5e:fe:9a:9a:00:5b:8f: 3e:90:5d:f3:a8:f6:e6:ad:bc:18:0c:43:78:8c:b3: 5f:c6:74:c2:e0:9d:05:f7:df:b3:7c:54:64:12:d8: bb:a0:75:e8:c4:49:24:c6:a0:aa:4f:9e:1d:4a:73: 58:83:e8:24:8e:62:a4:76:a0:4c:e0:b2:ce:c6:15: e1:d0:b3:b7:8c:b6:9c:9d:11:63:f0:d5:12:68:5a: 5a:a9:7e:0f:7f:40:e3:8d:65:e1:cc:99:43:27:ca: 80:3e:d4:43:a1:4f:02:f2:96:e6:34:a9:2d:6b:8e: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:92:85:A8:F5:E6:7B:DC:E9:33:F8:5B:9C:EB:3A:6F:76:7F:3B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7b:78:8c:28:0c:0a:a1:d7:0c:71:f8:4a:80:7b:2f:c7:51: 13:b4:0c:9d:6e:91:d7:a7:c1:fd:0c:82:08:f5:12:93:38:39: 37:67:aa:98:2d:0a:56:a3:91:74:ea:f6:27:1c:85:ff:ba:24: a4:4e:a3:d8:df:92:71:80:ec:3c:9a:a9:03:f3:2f:0a:e5:20: 92:94:5d:2c:bc:9a:68:25:6b:ad:f0:22:2f:02:3d:98:db:86: f0:dd:ce:27:f1:bc:cb:4c:1e:55:5e:97:31:2b:d9:9a:59:1a: 9a:1a:ac:cb:b8:04:0a:81:93:26:fd:95:19:65:eb:17:8c:37: 38:36:3a:99:43:87:08:8c:7c:54:3a:64:65:8f:0d:dc:3f:9a: c4:3c:16:66:a0:fa:df:9d:e9:52:42:ec:d9:79:21:e5:eb:9d: af:29:dd:91:ab:ef:03:a3:05:e9:d4:f7:16:b2:b9:bb:9b:13: 08:5d:f8:d0:7a:57:d4:7c:87:76:1f:76:3a:82:20:5b:44:3b: 2d:95:b5:9c:27:05:90:65:50:e3:e5:b7:92:53:be:cf:e9:81: 34:0c:6a:ec:ac:9f:4f:40:ee:b3:a4:12:f5:ce:fc:b3:2e:ce: 62:58:12:3d:f8:41:6b:86:38:6c:2b:aa:47:88:5d:8b:18:5f: 02:82:cc:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvU78rSe2MCPv2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWRlMjQzY2MtM2I4My00ODE4LWExZmEtYTQ1ZTBlZDIwOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvotkr2p0enZr4zmxoOXAlaZp/LIjrfXgrGR +xVwWGKZhH2sRc0gOb0l2tWUL/VrcZM2i/274dmJyvVtK+vHdlizEvrUkH+o/u3u P+hm2A5Y8w0UvyynPYSq4M87/xmURPpqshBATO/u0fk8GlC63MCRKraAde097qU3 xarxma6JyX4CiAwYQ58EAu251V7+mpoAW48+kF3zqPbmrbwYDEN4jLNfxnTC4J0F 99+zfFRkEti7oHXoxEkkxqCqT54dSnNYg+gkjmKkdqBM4LLOxhXh0LO3jLacnRFj 8NUSaFpaqX4Pf0DjjWXhzJlDJ8qAPtRDoU8C8pbmNKkta4785QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOeShaj15nvc6TP4W5zrOm92fztDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg2YmUwZmYtNTU2Yy0z N2Q3LTg2ZmUtMWNiYjY0ODY0NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZe3iMKAwKodcMcfhKgHsvx1ETtAydbpHXp8H9DIII9RKTODk3Z6qY LQpWo5F06vYnHIX/uiSkTqPY35JxgOw8mqkD8y8K5SCSlF0svJpoJWut8CIvAj2Y 24bw3c4n8bzLTB5VXpcxK9maWRqaGqzLuAQKgZMm/ZUZZesXjDc4NjqZQ4cIjHxU OmRljw3cP5rEPBZmoPrfnelSQuzZeSHl652vKd2Rq+8DowXp1PcWsrm7mxMIXfjQ elfUfId2H3Y6giBbRDstlbWcJwWQZVDj5beSU77P6YE0DGrsrJ9PQO6zpBL1zvyz Ls5iWBI9+EFrhjhsK6pHiF2LGF8Cgswy -----END CERTIFICATE-----Generated at Tue Oct 6 15:01:34 2026 by rpki-client